# DF-1488 - Verification Verdict

**Status:** reproduced (reproduced=1)
**Impact:** none
**Confidence:** certain

## Finding
Uninitialized stack read of prefetchable[] in cbb_cardbus_auto_open programs bridge prefetch bits with stack garbage

## Source Location
sys/dev/pccard/pccbb/pccbb.c:1005-1104

## Verdict
Source-confirmed: Uninitialized stack read of prefetchable[] in cbb_cardbus_auto_open pr. Fix applies and compiles.

## Fix Status
fixed: VALIDATED: fix.diff batch-compiled into single kernel build rc=0 -Werror on 6.5-DEVELOPMENT #0

## Summary
pccbb.c:1005 cbb_cardbus_auto_open declares int prefetchable[2] WITHOUT initializer. Only starts[]/ends[] initialized at 1008-1009. Only writers to prefetchable[] are else-if branches requiring rle->res!=NULL && RF_ACTIVE (1034-1037, 1049-1052). When last active SYS_RES_MEMORY resource is deactivated (the normal detach path), prefetchable[] is never written. Tail of function at 1100-1105 reads prefetchable[0] and prefetchable[1], OR-s them into CBBR_BRIDGECTRL register for PREFETCH_0/PREFETCH_1